Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/h57Ccd_bCX4nDCJlMTDyWt-r0fw.roa
File: h57Ccd_bCX4nDCJlMTDyWt-r0fw.roa (raw, json)
Hash identifier: 0Vfo2hZXTkVduluQfGM9DUhW0Ghc4mT1e7OWRZ0DL8Q=
Subject key identifier: 87:9E:C2:71:DF:DB:09:7E:27:0C:22:65:31:30:F2:5A:DF:AB:D1:FC
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 018DC75FCA074985CD0B1586179DC57E5C62
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/h57Ccd_bCX4nDCJlMTDyWt-r0fw.roa
Signing time: Tue 20 Feb 2024 16:36:00 +0000
ROA not before: Tue 20 Feb 2024 16:36:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 91.207.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Mar 2024 19:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:5f:ca:07:49:85:cd:0b:15:86:17:9d:c5:7e:5c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: Feb 20 16:36:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=879ec271dfdb097e270c22653130f25adfabd1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:0f:bc:a2:ab:3e:cb:43:0c:37:79:fd:c8:
73:de:94:36:ac:ae:42:46:f5:25:29:9f:d6:40:8a:
52:ef:f3:01:c7:83:f1:71:ca:60:7c:9a:b2:44:58:
3c:f0:28:c9:d6:f3:03:67:6a:75:de:a5:ce:3e:e8:
2f:26:85:b0:d1:58:0b:8b:57:e8:c9:b7:b0:74:d2:
2f:a3:e1:7d:6b:db:82:8e:de:ef:36:87:11:5a:bc:
47:8f:3c:2f:7a:5e:9c:4a:d0:7e:5b:65:43:a9:e9:
05:43:fe:b2:04:c9:91:7c:7e:97:33:f3:45:3a:4d:
95:de:85:4d:4a:d0:ff:1c:44:cb:94:e3:b0:44:d3:
91:45:48:41:91:bb:39:b8:f1:26:1b:30:8f:fc:aa:
8b:d5:81:fa:fb:0c:29:18:be:b5:6d:5e:26:4c:79:
24:41:c4:06:d3:66:b4:f4:76:bb:eb:db:12:55:a3:
9d:79:b2:6a:a6:35:75:6b:67:d5:df:68:7a:ae:28:
97:3b:ac:76:85:e0:53:28:57:83:e8:d8:25:31:d4:
b7:25:e5:26:84:49:f9:33:1b:e1:09:e5:31:4e:2b:
ec:8b:36:39:68:7f:77:2f:4d:c2:5e:df:c7:cc:7b:
c2:4c:28:51:b6:95:a8:0c:eb:9d:d3:2a:f5:df:4e:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9E:C2:71:DF:DB:09:7E:27:0C:22:65:31:30:F2:5A:DF:AB:D1:FC
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/h57Ccd_bCX4nDCJlMTDyWt-r0fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.116.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:d7:7b:d3:70:cb:ef:6f:b7:da:3b:e7:5c:02:29:e2:54:61:
87:54:0a:53:c2:ec:f1:c9:04:47:b2:7f:6d:36:1d:1a:9b:cc:
35:65:5c:07:fe:d9:20:5e:d8:e5:20:09:44:58:dd:1d:ac:d6:
58:c2:fe:80:f8:c1:d5:ff:d9:ca:d2:25:3c:06:58:3f:ff:57:
79:65:c4:08:a0:41:20:3b:af:ec:f6:c8:0e:7f:dc:7b:83:97:
3d:d3:55:f1:9e:f3:ae:c8:e9:cc:97:20:3c:ff:dd:ca:ed:5e:
8b:ee:01:7b:ec:52:c5:b2:1a:05:96:e9:b5:66:e1:68:08:53:
3f:bd:d5:67:43:d8:e3:f4:7b:b1:e1:a9:55:c9:85:f2:d1:15:
39:c2:1c:4e:b6:3d:4e:4e:f6:7a:cb:87:5c:86:6c:f5:71:cd:
95:06:ec:2e:ed:c4:8a:c4:37:0d:bd:ac:e6:f8:ac:02:55:36:
3b:09:56:25:ff:ac:75:72:88:0a:00:22:2f:e0:08:49:f5:36:
e6:30:d7:dc:f6:7f:94:0f:4d:57:27:1e:68:b1:82:0f:4d:fe:
98:1d:74:56:fa:27:72:c1:9c:f1:17:6d:1c:6a:20:14:9c:2e:
c6:13:b9:f1:02:57:a9:12:3c:e6:09:a5:41:07:6c:67:f9:01:
60:61:4f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:51:44 2025 by rpki-client